GroupBlog – Exchange, PowerShell, AD, Outlook etc.

Menu

Monthly Archives: December 2012

There is a lots of articles about enabling Kerberos authentication for Exchange 2010 CAS servers, but not much about what SPN (Service Principal Names) list. It is kind of easy to determine list of SPNs for particular servers. SPN records are similar in Exchange 2010 and Exchange 2013. Here is the procedure

Open command line or Powershell under elevated permissions

Type the following command

setspn -Q */*EX10* >> d:spn_records.txt

Explanation

setspn.exe – name of utility, which can set SPN records or list their status